8.1.13 Your payroll interface data must be transferred to the Scheme Administrator by a secure method. The Scheme Administrator recommends the use of their web based secure portal ‘Connect’ which has been certified by the Cabinet Office Security Working Group. Employers should contact their dedicated Scheme Administrator Interface Analyst for details on how to become a Connect user. 

8.1.14 Where the data is written to portable media e.g. a USB stick, it should be done in a secure environment. The data should be encrypted to AES 256 bit standard and protected by a complex password, which must be at least 10 characters long and have both upper and lowercase letters and at least one numerical digit. All portable media should be transported by a secure courier using a tracked service.

8.1.15 You are reminded that any data stored electronically is subject to the provisions of the current Data Protection legislation. Any processing carried out by a data processor (such as an external payroll provider) on your behalf, must be done under a written contract or SLA.

Published:
5 January 2022
Last updated:
5 January 2022